ckfyYour practice history, essays and recordings are personal. This page explains how we protect them.
Your account
- No passwords. You sign in with Google, so Mockfy never stores a password. Protect your Google account with two-step verification.
- Signed sessions. Your session cookie is signed and protected against tampering. Signing out ends it straight away.
- Your own data only. Every request is checked on our server, so you can only open your own tests and results, or those another learner chose to share with you.
In transit and at rest
- All traffic to Mockfy uses encrypted connections (HTTPS).
- Our database and its backups are hosted by our providers on encrypted infrastructure (see Subprocessors).
- Speaking Room calls are encrypted end to end between the two browsers by WebRTC. When a relay is needed, it passes the encrypted traffic on without being able to read it.
Inside the application
| Protection | What it does |
|---|---|
| Cross-site request protection | Actions can only be sent by Mockfy's own pages |
| Server-side timing | Test timers run on our server, so they cannot be changed in the browser |
| Escaped content | Text written by learners and in the blog is shown as text, never run as code |
| Least privilege | Only a small number of administrators can open the admin area |
| Audit log | Every administrative action is recorded |
| Blocking | Accounts that break our rules can be blocked immediately |
Speech and recordings
- Recordings of Speaking test answers are visible only to you.
- Speaking Room recordings are sent once to be turned into text and are not kept.
- Our speech-to-text provider deletes each job once the text is returned.
Reporting a vulnerability
If you believe you have found a security problem in Mockfy, please tell us privately: use Send feedback in the app or email joraboyevismoiljon649uchinchi@gmail.com. Include the steps to reproduce it. Please do not access other people's data, disrupt the Service or publish the issue before we have fixed it. We will acknowledge your report and keep you informed.